github
6 Dtwo policies tagged "github", including Block Secrets in GitHub Commits & PRs, Fence GitHub Access to the Company Org Allowlist. Browse by what the control does rather than which app it targets.
Block Secrets in GitHub Commits & PRsBlocks GitHub write tool calls whose payload looks like it carries a live credential into a repository, gist, pull request, or comment.Fence GitHub Access to the Company Org AllowlistDenies any GitHub tool call whose arguments.owner (read from input.payload.args.GitHub: Redact Secrets from Read ResponsesScans the responses of GitHub's crown-jewel read tools and masks known credential shapes with a fixed [REDACTED-SECRET] marker before the text enters agent…Prevent Public Exposure of GitHub Repos, Gists & ForksStops the agent from exposing private code to the public across three GitHub write tools, at ingress — before the call reaches the GitHub MCP server, so a…Read-Only GitHub for Non-EngineersEstablishes the least-privilege baseline for the GitHub MCP connector on the agent channel.Require Human Approval: GitHub Merges & ApprovalsKeeps a human in the loop on the two GitHub actions that consummate a code change: merging a pull request and approving one .